backend-manager 5.2.19 → 5.3.0

package/src/manager/libraries/email/data/disposable-domains.json

@@ -602,6 +602,7 @@
   "beaconmessenger.com",
   "bearsarefuzzy.com",
   "beastmail.space",
+  "beatbok.online",
   "beddly.com",
   "beefmilk.com",
   "beelsil.com",
@@ -1833,6 +1834,7 @@
   "freeteenbums.com",
   "freetimer.online",
   "freundin.ru",
+  "friday12.store",
   "friendlymail.co.uk",
   "frm.ovh",
   "front14.org",
@@ -2058,6 +2060,7 @@
   "gowikitv.com",
   "grandmamail.com",
   "grandmasmail.com",
+  "graphicbulk.site",
   "graphicenda.site",
   "grassdev.com",
   "gravityengine.cc",
@@ -2128,6 +2131,7 @@
   "haltospam.com",
   "hamham.uk",
   "handrik.com",
+  "hanghai232.shop",
   "hangxomcuatoilatotoro.ml",
   "happiseektest.com",
   "happy-new-year.top",
@@ -2238,6 +2242,7 @@
   "housereformas.es",
   "hpari.com",
   "hpc.tw",
+  "hqpdf.com",
   "hs.vc",
   "hsmw.net",
   "ht.cx",
@@ -2257,6 +2262,7 @@
   "hushmail.cf",
   "huskion.net",
   "hutudns.com",
+  "huytuyen.click",
   "hvastudiesucces.nl",
   "hwsye.net",
   "hxopi.ru",
@@ -2489,6 +2495,7 @@
   "jdmadventures.com",
   "jdz.ro",
   "je-recycle.info",
+  "jejes.de",
   "jellow.ml",
   "jellyrolls.com",
   "jeoce.com",
@@ -2714,6 +2721,7 @@
   "laste.ml",
   "lastmail.co",
   "lastmail.com",
+  "laulund.info",
   "launders.money",
   "lawlita.com",
   "laxex.ru",
@@ -3163,6 +3171,7 @@
   "midlertidig.com",
   "midlertidig.net",
   "midlertidig.org",
+  "midwestpride.org",
   "mierdamail.com",
   "migmail.net",
   "migmail.pl",
@@ -3376,6 +3385,7 @@
   "nanonym.ch",
   "nanopools.info",
   "naobk.com",
+  "narrowment.com",
   "narsub.online",
   "narsub.shop",
   "naslazhdai.ru",
@@ -3542,6 +3552,7 @@
   "nutpa.net",
   "nuts2trade.com",
   "nvhrw.com",
+  "nvqt304.xyz",
   "nwldx.com",
   "nwytg.com",
   "nwytg.net",
@@ -3584,6 +3595,7 @@
   "oku.ovh",
   "oky.ovh",
   "okzk.com",
+  "oldao.com",
   "olimp-case.ru",
   "oliviadiffuser.store",
   "oloh.ru",
@@ -3594,6 +3606,7 @@
   "omarnasrrr.com",
   "omfg.run",
   "omnievents.org",
+  "omnilog.space",
   "omtecha.com",
   "onbap.com",
   "one-mail.top",
@@ -3822,6 +3835,7 @@
   "powerscrews.com",
   "powlearn.com",
   "pox2.com",
+  "pozima.rest",
   "pp7rvv.com",
   "ppetw.com",
   "pptrvv.com",
@@ -4060,6 +4074,7 @@
   "royaldoodles.org",
   "royalmarket.life",
   "royandk.com",
+  "roybl.com",
   "rppkn.com",
   "rr.nu",
   "rsvhr.com",
@@ -4069,6 +4084,7 @@
   "rudymail.ml",
   "rulersonline.com",
   "rumgel.com",
+  "run.place",
   "runi.ca",
   "rupayamail.com",
   "ruru.be",
@@ -4097,6 +4113,7 @@
   "sahildash.dev",
   "sailmail.io",
   "sajutadollars.com",
+  "salakoais.shop",
   "saleis.live",
   "salmeow.tk",
   "sam1.eu.org",
@@ -4419,6 +4436,7 @@
   "spymail.one",
   "squizzy.de",
   "squizzy.net",
+  "srame.com",
   "sroff.com",
   "sry.li",
   "ssi-bsn.infos.st",
@@ -4816,6 +4834,7 @@
   "trackden.com",
   "tradermail.info",
   "tranceversal.com",
+  "trandigabapoe.shop",
   "trangiabao.click",
   "trangzim.uk",
   "translateid.com",
@@ -5287,6 +5306,7 @@
   "wyoxafp.com",
   "wywnxa.com",
   "wzofit.com",
+  "x-clone.asia",
   "x-lab.net",
   "x0q.net",
   "x1ix.com",
@@ -5295,6 +5315,8 @@
   "xagloo.com",
   "xapimail.top",
   "xbaby69.top",
+  "xbrok.com",
+  "xclone.asia",
   "xcode.ro",
   "xcodes.net",
   "xcompress.com",
@@ -5365,6 +5387,7 @@
   "yeezus.ru",
   "yep.it",
   "yermail.net",
+  "yeummo.io.vn",
   "yhg.biz",
   "ynmrealty.com",
   "yodx.ro",

package/src/manager/libraries/email/generators/lib/image-illustrator.js

@@ -0,0 +1,154 @@
+/**
+ * Image illustrator — AI generates a flat-vector PNG illustration per section
+ * directly via OpenAI's image model (gpt-image-2), no SVG-author-then-rasterize step.
+ *
+ * This is the DEFAULT newsletter illustration method. It replaces the older
+ * svg-illustrator.js approach (AI writes an <svg>, resvg rasterizes it) which is
+ * still available as a fallback via newsletterConfig.method.image = 'svg'.
+ *
+ * Output matches svg-illustrator's contract: { png: Buffer, fallback, meta }.
+ * The newsletter pipeline (image-host.js) only requires `img.png` to be a PNG Buffer.
+ *
+ * Style: clean flat 2D vector illustration (Stripe / Linear / undraw.co aesthetic),
+ * built from the brand palette, on a white background, no text. The prompt mirrors
+ * the validated spike in scripts/.temp/ai-image-test/.
+ */
+const DEFAULT_MODEL = 'gpt-image-2';
+const DEFAULT_SIZE = '1024x1024';     // square reads best for flat section art
+const DEFAULT_QUALITY = 'medium';     // medium is plenty for flat vector; ~40-50s/image
+
+/**
+ * Generate one illustration for a section.
+ *
+ * @param {object} args
+ * @param {string} args.imagePrompt - Visual description from the structure
+ * @param {object} args.brand - { name, tagline, color: { primary, secondary, ... } }
+ * @param {object} args.newsletterConfig - marketing.beehiiv.content
+ * @param {object} args.ai - Manager.AI() instance
+ * @param {object} args.assistant - BEM assistant
+ * @returns {Promise<{png: Buffer, fallback: boolean, meta: object}>}
+ */
+async function generateSectionImage({ imagePrompt, brand, newsletterConfig, ai, assistant }) {
+  const startTime = Date.now();
+  const model = newsletterConfig?.model?.image || DEFAULT_MODEL;
+  const size = newsletterConfig?.image?.size || DEFAULT_SIZE;
+  const quality = newsletterConfig?.image?.quality || DEFAULT_QUALITY;
+
+  const palette = resolvePalette(brand, newsletterConfig);
+  const subject = imagePrompt || 'An abstract geometric shape representing the topic.';
+  const prompt = buildImagePrompt({ brand, palette, subject });
+
+  let png = null;
+  let fallback = false;
+  let revisedPrompt = null;
+  let attempts = 0;
+
+  for (let attempt = 0; attempt < 2; attempt++) {
+    attempts++;
+    try {
+      const result = await ai.image({
+        provider: 'openai',
+        model,
+        prompt,
+        size,
+        quality,
+        background: 'opaque',
+      });
+
+      if (result?.png || result?.buffer) {
+        png = result.png || result.buffer;
+        revisedPrompt = result.revisedPrompt || null;
+        break;
+      }
+
+      assistant.log(`Image generation attempt ${attempt + 1} returned no buffer`);
+    } catch (e) {
+      assistant.error(`Image generation attempt ${attempt + 1} failed: ${e.message}`);
+    }
+  }
+
+  // No transparent-PNG placeholder fallback that's valid as an image — if both
+  // attempts fail, return a 1x1 transparent PNG so the pipeline doesn't crash on
+  // a non-Buffer. The caller logs and proceeds.
+  if (!png) {
+    png = TRANSPARENT_PNG;
+    fallback = true;
+  }
+
+  return {
+    png,
+    fallback,
+    meta: {
+      method: 'image',
+      provider: 'openai',
+      model,
+      size,
+      quality,
+      durationMs: Date.now() - startTime,
+      attempts,
+      fallback,
+      revisedPrompt,
+    },
+  };
+}
+
+/**
+ * Resolve brand palette — same precedence as svg-illustrator.js#resolvePalette:
+ * newsletter theme colors → brand.color.* → sensible defaults.
+ */
+function resolvePalette(brand, newsletterConfig) {
+  const theme = newsletterConfig?.theme || {};
+
+  return {
+    primary:   theme.primaryColor   || brand?.color?.primary   || '#4B5BFF',
+    secondary: theme.secondaryColor || brand?.color?.secondary || '#1E1E2A',
+    accent:    theme.accentColor    || brand?.color?.accent    || '#F4F6FA',
+  };
+}
+
+/**
+ * Build the flat-vector art-direction prompt with brand identity + palette baked in.
+ * Mirrors the validated prompt from scripts/.temp/ai-image-test/generate.js.
+ */
+function buildImagePrompt({ brand, palette, subject }) {
+  const { primary, secondary, accent } = palette;
+  const name = brand?.name || 'the brand';
+  const tagline = brand?.tagline ? ` — ${brand.tagline}` : '';
+
+  return [
+    `Minimal flat vector illustration for the newsletter of "${name}"${tagline}.`,
+    '',
+    'STYLE: modern flat 2D vector illustration, like the marketing graphics on',
+    'Stripe, Linear, Vercel, Notion, or undraw.co. Clean geometric shapes with',
+    'flat solid color fills and crisp edges. Simple, friendly, and minimal.',
+    '',
+    'ABSOLUTELY NOT: no photorealism, no 3D renders, no realistic textures, no',
+    'photography, no depth of field, no dramatic lighting, no film grain, no',
+    'shading or gradients beyond a single subtle flat tone shift, no glossy',
+    'reflections, no metallic surfaces. This must look hand-designed in a vector',
+    'tool (Figma/Illustrator), NOT rendered or photographed.',
+    '',
+    'PALETTE (use ONLY these flat colors, plus white):',
+    `- Primary:   ${primary}`,
+    `- Secondary: ${secondary}`,
+    `- Accent:    ${accent}`,
+    'Flat solid fills only. A clean white or very-light background.',
+    '',
+    'COMPOSITION: single clear simple subject, lots of clean negative space,',
+    'centered or rule-of-thirds, uncluttered, plenty of breathing room.',
+    '',
+    'HARD CONSTRAINTS: absolutely NO text, NO words, NO letters, NO numbers,',
+    'NO logos, NO watermarks, NO UI mockups, NO borders or frames.',
+    '',
+    `SUBJECT (the focal scene to illustrate): ${subject}`,
+  ].join('\n');
+}
+
+// 1x1 transparent PNG — last-resort fallback so a failed generation still yields a
+// valid PNG Buffer instead of crashing image-host.js's Buffer check.
+const TRANSPARENT_PNG = Buffer.from(
+  'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==',
+  'base64'
+);
+
+module.exports = { generateSectionImage };

package/src/manager/libraries/email/generators/newsletter.js

@@ -9,7 +9,9 @@
  *   1. Read newsletter categories from Manager.config.marketing.beehiiv.content.categories
  *   2. Fetch ready sources from parent server (atomic claim via claimFor=brandId)
  *   3. structure.js → AI authors subject, preheader, intro, sections, signoff
- *   4. svg-illustrator.js → AI authors one SVG per section, rasterize to PNG
+ *   4. image-illustrator.js → AI generates one flat-vector PNG per section via
+ *      gpt-image-2 (default). Set content.method.image = 'svg' to use the legacy
+ *      svg-illustrator.js (AI writes an <svg>, resvg rasterizes it) instead.
  *   5. mjml-template.js → compile MJML → email-safe HTML
  *   6. Persist PNGs (caller-provided via opts.persistImage or default no-op)
  *   7. Mark sources as used on parent server
@@ -22,8 +24,19 @@ const fetch = require('wonderful-fetch');
 
 const { filterSources } = require('./lib/filter.js');
 const { generateStructure } = require('./lib/structure.js');
-const { generateSectionImage } = require('./lib/svg-illustrator.js');
+const { generateSectionImage: generateImageSection } = require('./lib/image-illustrator.js');
+const { generateSectionImage: generateSvgSection } = require('./lib/svg-illustrator.js');
 const { renderNewsletter } = require('./lib/mjml-template.js');
+
+// Default illustration method. 'image' = gpt-image-2 flat-vector PNGs (default).
+// 'svg' = legacy AI-authored SVG rasterized via resvg. Selected per-brand via
+// marketing.beehiiv.content.method.image.
+const DEFAULT_IMAGE_METHOD = 'image';
+
+function resolveSectionImageFn(newsletterConfig) {
+  const method = newsletterConfig?.method?.image || DEFAULT_IMAGE_METHOD;
+  return method === 'svg' ? generateSvgSection : generateImageSection;
+}
 const { renderMarkdown } = require('./lib/markdown-renderer.js');
 const { uploadAssets, RAW_BASE } = require('./lib/image-host.js');
 const { buildPublicConfig } = require('../../../routes/brand/get.js');
@@ -165,6 +178,7 @@ async function generate(Manager, assistant, settings, opts = {}) {
       return;
     }
 
+    const generateSectionImage = resolveSectionImageFn(config);
     const images = await Promise.all(
       structure.sections.map((s) => generateSectionImage({
         imagePrompt: s.image_prompt,

package/src/manager/libraries/payment/discount-codes.js

@@ -15,6 +15,7 @@ const DISCOUNT_CODES = {
   'WELCOME15': { percent: 15, duration: 'once' },
   'SAVE10': { percent: 10, duration: 'once' },
   'FLASH20': { percent: 20, duration: 'once' },
+  'GIFT15': { percent: 15, duration: 'once' },
 
   // Email campaigns (used by recurring sale seeds — restricted by audience)
   'UPGRADE15': {

package/src/manager/routes/admin/post/put.js

@@ -91,7 +91,7 @@ async function fetchPost(assistant, url) {
   const fetch = Manager.require('wonderful-fetch');
 
   // Use NEW API format
-  const result = await fetch(`${Manager.project.apiUrl}/backend-manager/content/post`, {
+  const result = await fetch(`${Manager.getApiUrl()}/backend-manager/content/post`, {
     method: 'get',
     response: 'json',
     timeout: 190000,

package/src/manager/routes/handler/post/post.js

@@ -100,7 +100,7 @@ module.exports = async ({ assistant, Manager, user, settings, analytics }) => {
   // Send notification (unless explicitly disabled)
   if (settings.sendNotification !== false) {
     // Use NEW API format
-    await fetch(`${Manager.project.apiUrl}/backend-manager/admin/notification`, {
+    await fetch(`${Manager.getApiUrl()}/backend-manager/admin/notification`, {
       method: 'POST',
       response: 'json',
       headers: {

package/src/manager/routes/payments/intent/processors/test.js

@@ -155,7 +155,7 @@ async function createOneTimeIntent({ uid, orderId, product, productId, confirmat
  * Fire-and-forget webhook to trigger the full pipeline
  */
 function fireWebhook({ event, assistant }) {
-  const webhookUrl = `${assistant.Manager.project.apiUrl}/backend-manager/payments/webhook?processor=test&key=${process.env.BACKEND_MANAGER_WEBHOOK_KEY}`;
+  const webhookUrl = `${assistant.Manager.getApiUrl()}/backend-manager/payments/webhook?processor=test&key=${process.env.BACKEND_MANAGER_WEBHOOK_KEY}`;
   fetch(webhookUrl, {
     method: 'POST',
     response: 'json',

package/src/manager/routes/user/delete.js

@@ -46,7 +46,7 @@ module.exports = async ({ assistant, Manager, user, settings, libraries }) => {
   // Sign out of all sessions first
   assistant.log(`Signing out of all sessions for ${uid}...`);
 
-  await fetch(`${Manager.project.apiUrl}/backend-manager/user/sessions`, {
+  await fetch(`${Manager.getApiUrl()}/backend-manager/user/sessions`, {
     method: 'delete',
     timeout: 60000,
     response: 'json',

package/src/manager/routes/user/signup/post.js

@@ -478,9 +478,11 @@ function sendDiscountNudgeEmail(assistant, uid, firstName) {
 
 It's Ian, the founder of **${Manager.config.brand.name}**.
 
-As a thank-you for giving us a try, I'd love to send you a code for a **premium upgrade**. **Just reply to this email** and I'll get one over to you.
+As a thank-you for giving us a try, I'd love to send you a code for a **premium upgrade**.
 
-I read every reply, so if you have any questions, feedback, or there's anything I can help with, this is the place. Looking forward to hearing from you!`,
+**Just reply to this email** and I'll get one over to you.
+
+I read every reply and I'm looking forward to hearing from you!`,
       },
       signoff: {
         type: 'personal',

package/src/test/runner.js

@@ -186,7 +186,7 @@ class TestRunner {
         // the health endpoint re-reads the file as a freshness guard. By
         // construction these are equal — no mismatch warning needed.
         const emulatorExtended = !!response.data?.testExtendedMode;
-        console.log(chalk.gray(`  Mode: ${emulatorExtended ? 'EXTENDED (real APIs)' : 'normal (mocked)'}`));
+        console.log(chalk.gray(`  Mode: ${emulatorExtended ? 'extended (real external APIs)' : 'normal (external APIs skipped)'}`));
 
         return true;
       }
@@ -206,23 +206,32 @@ class TestRunner {
    * Setup test accounts - deletes existing test users and recreates them fresh
    */
   async setupAccounts() {
-    // Ensure meta/stats doc exists (required for on-create batch writes)
+    // Load the optional test/_init.js hooks from BOTH test roots (BEM core +
+    // consumer project): extra `accounts` to create and `setup()` to seed fixtures.
+    const initHooks = this.loadInitHooks();
+
+    // Flush the entire emulator Firestore + delete Auth test users (clean slate).
+    process.stdout.write(chalk.gray('  Wiping emulator + deleting test users... '));
+    const deleteResult = await testAccounts.deleteTestUsers(this.options.admin, initHooks.accounts);
+    console.log(chalk.green(`✓ (${deleteResult.deleted} deleted, ${deleteResult.skipped} skipped)`));
+
+    // Ensure meta/stats doc exists (required for on-create batch writes + the
+    // admin stats route). MUST run AFTER the wipe above — the flush recursively
+    // deletes every collection (including meta/stats), so seeding before it would
+    // be clobbered. Seeding here guarantees a `users` field survives even after
+    // the notification on-write trigger merges in its `notifications` counter.
     process.stdout.write(chalk.gray('  Ensuring meta/stats doc exists... '));
     await this.ensureMetaStats();
     console.log(chalk.green('✓'));
 
-    // Delete existing test user documents to ensure clean state
-    process.stdout.write(chalk.gray('  Deleting existing test users... '));
-    const deleteResult = await testAccounts.deleteTestUsers(this.options.admin);
-    console.log(chalk.green(`✓ (${deleteResult.deleted} deleted, ${deleteResult.skipped} skipped)`));
-
     process.stdout.write(chalk.gray('  Creating test accounts... '));
 
-    // Create fresh test accounts
+    // Create fresh test accounts (built-in + any project-defined via _init.js).
     const result = await testAccounts.createTestAccounts(
       this.options.admin,
       this.options.domain,
-      this.config
+      this.config,
+      initHooks.accounts
     );
 
     if (!result.success) {
@@ -232,8 +241,28 @@ class TestRunner {
 
     console.log(chalk.green(`✓ (${result.created} created)`));
 
-    // Fetch account privateKeys
-    this.accounts = await testAccounts.fetchPrivateKeys(this.options.admin, this.options.domain, this.config);
+    // Fetch account privateKeys (built-in + project-defined).
+    this.accounts = await testAccounts.fetchPrivateKeys(this.options.admin, this.options.domain, this.config, initHooks.accounts);
+
+    // Run custom setup hooks (BEM core first, then consumer). Runs AFTER the
+    // standard test accounts exist and AFTER the clean slate, so they can seed
+    // fixtures (brands, etc.) and reference the created accounts.
+    for (const setup of initHooks.setups) {
+      process.stdout.write(chalk.gray('  Running test/_init.js setup... '));
+      try {
+        await setup({
+          admin: this.options.admin,
+          config: this.config,
+          accounts: this.accounts,
+          Manager: this.config.Manager,
+          assistant: this.config.assistant,
+        });
+        console.log(chalk.green('✓'));
+      } catch (e) {
+        console.log(chalk.red(`✗ (${e.message})`));
+        return false;
+      }
+    }
 
     // Initialize rules testing context for security rules tests
     process.stdout.write(chalk.gray('  Initializing rules testing context... '));
@@ -253,23 +282,30 @@ class TestRunner {
   }
 
   /**
-   * Ensure meta/stats document exists (required for user count increments)
-   * Creates with initial values if missing, does not overwrite existing
+   * Ensure meta/stats document has a baseline `users` counter (required for user
+   * count increments and the admin stats route).
+   *
+   * Uses a MERGE write that always runs — it does NOT early-return when the doc
+   * already exists. The reason: the preceding emulator wipe recursively deletes
+   * the `notifications` collection, which fires the notification on-write *delete*
+   * trigger for each doc. Those triggers merge `{ notifications: increment(-1) }`
+   * into meta/stats and can race ahead of this seed, re-creating the doc as
+   * `{ notifications: { total: -N } }` with NO `users` field. A plain
+   * "create-if-missing" seed would then skip (doc.exists === true) and leave
+   * `users` absent — exactly the bug that made the admin stats tests flaky.
+   *
+   * Merging `{ users: { total: 0 } }` is safe to run unconditionally: it seeds the
+   * baseline without clobbering whatever `notifications` value those triggers land,
+   * and the real user-count increments overwrite total: 0 as accounts are created.
    */
   async ensureMetaStats() {
     const admin = this.options.admin;
     const statsRef = admin.firestore().doc('meta/stats');
 
-    const doc = await statsRef.get();
-    if (doc.exists) {
-      return; // Already exists, don't overwrite
-    }
-
-    // Create initial stats document
     await statsRef.set({
       users: { total: 0 },
       brand: this.options.brand?.id,
-    });
+    }, { merge: true });
   }
 
   /**
@@ -284,6 +320,87 @@ class TestRunner {
     }
   }
 
+  /**
+   * Load a single `test/_init.js` lifecycle hook from a test root.
+   *
+   * The module MUST export a function — `module.exports = (ctx) => ({ ... })` —
+   * called with `{ config, Manager }` and returning the hook object
+   * (`{ accounts, setup }`). This lets a project compute its accounts/fixtures
+   * from config at load time.
+   *
+   * Returns `{}` if the file doesn't exist, isn't a function, or fails to resolve.
+   */
+  loadInit(testDir, label) {
+    const initPath = path.join(testDir, '_init.js');
+
+    if (!jetpack.exists(initPath)) {
+      return {};
+    }
+
+    try {
+      const fn = require(initPath);
+
+      if (typeof fn !== 'function') {
+        console.log(chalk.red(`  ✗ ${label} test/_init.js must export a function: module.exports = (ctx) => ({ ... })`));
+        return {};
+      }
+
+      const mod = fn({ config: this.config, Manager: this.config?.Manager });
+      return mod && typeof mod === 'object' ? mod : {};
+    } catch (e) {
+      console.log(chalk.red(`  ✗ Failed to load ${label} test/_init.js: ${e.message}`));
+      return {};
+    }
+  }
+
+  /**
+   * Load and merge the `test/_init.js` lifecycle hooks from BOTH test roots —
+   * BEM core (`<bem>/test/_init.js`) and the consumer project
+   * (`<projectDir>/test/_init.js`). Same contract for both, so framework and
+   * consumer authors write the identical file shape. Each exports a function
+   * (see loadInit) returning:
+   *   - `accounts` — extra test accounts to create alongside the built-in ones,
+   *     each `{ id, uid, email, properties }` (email may use the `{domain}`
+   *     placeholder). One per lifecycle this project needs to exercise.
+   *   - `async setup({ admin, config, accounts, Manager, assistant })` — seed
+   *     fixtures (brands, etc.) AFTER the clean slate + account creation.
+   *
+   * There is no `cleanup` hook: the entire emulator Firestore is flushed before
+   * every run (deleteTestUsers → flushEmulatorFirestore) and each test cleans up
+   * after itself, so there is nothing project-level to tear down.
+   *
+   * Returns the merged extra `accounts` map (BEM core then consumer; consumer
+   * wins on key collision) and the ordered `setups` runners (BEM core first).
+   */
+  loadInitHooks() {
+    const bemTestsDir = path.resolve(__dirname, '../../test');
+    const projectTestsDir = path.join(this.options.projectDir, 'test');
+
+    const hooks = [
+      this.loadInit(bemTestsDir, 'BEM core'),
+      this.loadInit(projectTestsDir, 'project'),
+    ];
+
+    // Merge extra accounts from both roots. Accept either an array of account
+    // defs or a keyed object; normalize to a keyed object on `id`.
+    const accounts = {};
+    for (const h of hooks) {
+      const list = Array.isArray(h.accounts)
+        ? h.accounts
+        : Object.values(h.accounts || {});
+      for (const account of list) {
+        if (account && account.id) {
+          accounts[account.id] = account;
+        }
+      }
+    }
+
+    return {
+      accounts,
+      setups: hooks.filter((h) => typeof h.setup === 'function').map((h) => h.setup),
+    };
+  }
+
   /**
    * Discover test files in directory
    */
@@ -297,6 +414,11 @@ class TestRunner {
         continue;
       }
 
+      // Skip the _init.js lifecycle hook — it's run by setupAccounts(), not as a test.
+      if (item === '_init.js') {
+        continue;
+      }
+
       // Skip legacy 'functions' directory unless --legacy flag is set
       if (item === 'functions' && !this.options.includeLegacy) {
         continue;